124 matches found
CVE-2026-96218
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...
CVE-2026-83798
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...
CVE-2026-96218
A vulnerability exists in the Windows Update Stack due to improper access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-15 (External Control of System or Configuration Setting) and carries a MEDIUM base severity (CVSS 3.1...
CVE-2026-83798
The Windows Update Stack is vulnerable to a flaw involving the improper verification of cryptographic signatures . This vulnerability allows an authorized attacker to perform spoofing locally . The issue is associated with CWE-347 (Improper Verification of Cryptographic Signature) and CWE-20 (Imp...
Windows Update Stack Spoofing Vulnerability
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...
Windows Update Stack Tampering Vulnerability
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...
CVE-2026-83798: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...
PT-2026-113036
Name of the Vulnerable Software and Affected Versions Windows Update Stack affected versions not specified Description Improper access control allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the moment, there is no information about a newe...
Microsoft Windows: CVE-2026-96218: Windows Update Stack Tampering Vulnerability
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...
PT-2026-112592
Name of the Vulnerable Software and Affected Versions Windows Update Stack affected versions not specified Description Improper verification of cryptographic signatures allows an authorized attacker to perform local spoofing, which can affect the system. Recommendations At the moment, there is no...
CVE-2026-96218: External Control of System or Configuration Setting
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...
September Microsoft Patch Tuesday
September Microsoft Patch Tuesday. A total of 973 vulnerabilities were addressed - more than twice as many as in August. Seven products had 20 or more vulnerabilities fixed: Windows Biometric Service 64, Microsoft SQL Server 54, Windows DHCP Server 36, Microsoft Office Word 35, Windows NTFS 29,...
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild. These include 723 flaws in Windows, 111 in Office and Office 2016, 62 in SQL, and 22 i...
Windows Update Stack Privilege Escalation
The vulnerability of the Windows Update Stack component in Windows operating systems is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical." Microsoft notes that 2 of the vulnerabilities disclosed this month have been exploited in the wild:...
Patch Tuesday - September 2026
Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday, including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch...
CVE-2026-81963
Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...
CVE-2026-81963
Windows Update Stack is affected by an improper link resolution before file access ('link following') flaw that allows an authorized attacker with low privileges to elevate privileges locally , rated CVSS 7.8 HIGH with high impact to confidentiality, integrity, and availability. The vulnerability...
